@ 


-* + 
*.. Cellebrite 
Extraction Report - Apple iOS Full File system www.cellebrite.com 


Chats (1) 


Signal (1) 


Stewart (1) 


Start Time: 9/20/2020 2:58:11 PM(UTC-5) 

Last Activity: 1/3/2021 3:18:13 PM(UTC-6) 

Number of attachments: 1 

Source: Signal 

Account: Stewart 

Source file: 00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : OxFA7BD5B (Table: model_TSThread, model_TSInteraction, 
model_OWSUserProfile, Size: 955158528 bytes) 

Source Extraction: Legacy 

Body file: chat-1.txt 


Participants: 
+9103867754 
el Randy Earp 
Stewart 


eo Stewart (owner) 


Identifier: BAEG6F5F0-952B-4DAD-A27 1-98E46034492A 


Stewart Stewart (owner) 


Contact. 
9/20/2020 9:53:33 PM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : OxFF3FA8F 
(Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 bytes) 


+9103867754 Randy Earp 
Got it. Thanks 


9/20/2020 11:48:44 PM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1056EE61 
(Table: model_TSiInteraction, Size: 955158528 bytes) 


Stewart Stewart (owner) 


9/20/2020 11:51:43 PM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : OxDFEA282 
(Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 
00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1074FB1C (Table: model_TSInteraction, Size: 955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42- 
F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1136AE44 (Table: 
model_TSInteraction, Size: 955158528 bytes) 


Stewart Stewart (owner) 


Thank you brother! Thank you again for coming to KY. It was great to have you with 


us! 


9/26/2020 7:02:05 AM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1146A75A (Table: model_TSInteraction, model_OWSUserProfile, Size: 
955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1146A082 (Table: model_TSInteraction, Size: 955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x11492E55 
(Table: model_TSInteraction, Size: 955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 
00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x11492BFC (Table: model_TSInteraction, Size: 955158528 bytes) 


Stewart Stewart (owner) 


Very satisfied. Actually, we should have used your experience more in planning and in 
establishing SOPs for op. 


| was trying not to micro-manage Whip. In future we need to tighten up and have a REAL 
Op order. 


9/26/2020 9:17:57 AM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x114885DB (Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 
bytes) 


Source Extraction: 

Legacy 

Source Info: 
00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x114882CD (Table: model_TSInteraction, Size: 955158528 bytes) 


Stewart Stewart (owner) 


Doug did very well on QRF last night. | had him roll with me as D1. Local driver, Chris, me 
in passenger seat and Doug and Bill in the back. 


All good till the end of the night. 


Then we had a situation where the KMR (Kentucky Mountain Rangers) had a black male 
following them. Their leader, “Roudy” called me and told me. 


| told him “drive in a box and keep him busy till Whip can come to you” but it was too late. 
They had let this guy follow them almost all the way to our parking area. 


| told him to go to the riverside park, turn around, and put your headlights on the guy and 
wait for Whip 


9/26/2020 9:23:14 AM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : OxFF76558 (Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 
bytes) 


Stewart Stewart (owner) 


So Whip and Todd go there, and we follow. 


KMR guys were all out of their vehicles in a mob. 


Whip and Todd went to either side of the vehicle and talked to driver. Driver was drunk. 
AND filming on livestream. 


9/26/2020 9:25:53 AM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86BO0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x113E19BE (Table: model_TSInteraction, model_OWSUserProfile, Size: 
955158528 bytes) 


Stewart Stewart (owner) 


Whip and Todd were able to talk him down and handle it. We told the rest to go back to our 
parking area. 


Guy was just an idiot who decided to follow the “militia guys” and film them. 
9/26/2020 9:26:54 AM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x113E1375 (Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 
bytes) 


Stewart Stewart (owner) 


Doug did point his AR at the guy in the car. Todd pushed Doug’s muzzle down and told him 
“don't do that” but then he did it again and | told Doug “don’t point your weapon at him’. 
Doug walked back to the truck. 


| think Doug’s not happy about us telling him not to do that. 


But he needs to let our cops handle situations like that. Whip and Todd are both cops. Let 
cops handle what is essentially similar to a traffic stop/interview. 


9/26/2020 9:30:54 AM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x113C66E5 (Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 
bytes) 


Stewart Stewart (owner) 


And he needs to understand this isn’t a full on military battlefield yet. Let the cops take lead 


on things like that. 


9/26/2020 9:31:50 AM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x113C60E1 (Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 
bytes) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x111F9E1B (Table: model_TSInteraction, Size: 955158528 bytes) 


Stewart Stewart (owner) 


Thank you. 


9/26/2020 12:37:02 PM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x111F91D5 
(Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x12005088 
(Table: model_TSInteraction, Size: 955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 
00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x13D8F220 (Table: model_TSInteraction, Size: 955158528 bytes) 
00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
OB9BEC309007/Attachments/F9CC7881-31EC-43F4-B91F-2B52546E0FCF/signal-2020-10-13-113504.jpeg : (Size: 297182 bytes) 


Stewart Stewart (owner) 


10/20/2020 11:18:35 PM(UTC-5) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x14C2B1DE 
(Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 bytes) 


Stewart Stewart (owner) 


11/11/2020 6:32:27 AM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1B5F 1351 
(Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42- 
F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1CC6718B (Table: 
model_TSInteraction, Size: 955158528 bytes) 


Stewart Stewart (owner) 


Challenge: Guard 


Answer: Oak. 
My call sign: Maple. 


Roger. 
11/13/2020 7:01:00 PM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 
00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA- 
86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1C900147 (Table: model_TSInteraction, 
model_OWSUserProfile, Size: 955158528 bytes) 


Stewart Stewart (owner) 


Medical team needs to sort out nearest trauma center (s). And medivac 


Also casualty pick up points. 
11/13/2020 7:02:10 PM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 

00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C-49CA-86B0- 
0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1CC65831 (Table: model_TSInteraction, model_OWSUserProfile, Size: 
955158528 bytes) 


Stewart Stewart (owner) 


And need possible rally points around freedom plaza selected 


11/13/2020 7:03:04 PM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 
00008101-000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42-F 10C- 
49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1CC65269 (Table: model_TSInteraction, 
model_OWSUserProfile, Size: 955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1CC650A1 
(Table: model_TSInteraction, Size: 955158528 bytes) 


Stewart Stewart (owner) 


Do all our men have helmets? 


11/13/2020 7:05:26 PM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1CC422E8 
(Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 bytes) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1CC45608 
(Table: model_TSInteraction, Size: 955158528 bytes) 


+9103867754 Randy Earp 


You coming back out? 


11/13/2020 8:23:26 PM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1CC2BABD 
(Table: model_TSInteraction, Size: 955158528 bytes) 


+9103867754 Randy Earp 
Red Grass. C1. Password for rest of night 


11/13/2020 8:25:40 PM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42- 


F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : Ox1CCEAC75 (Table: 


model_TSInteraction, Size: 955158528 bytes) 


+9103867754 Randy Earp 


Coming in 


11/13/2020 8:37:57 PM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1CC52959 
(Table: model_TSiInteraction, Size: 955158528 bytes) 


Stewart Stewart (owner) 


Five min 


11/13/2020 8:38:28 PM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : 0x1CC523C8 
(Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 bytes) 


Stewart Stewart (owner) 


1/3/2021 3:18:13 PM(UTC-6) 


Source Extraction: 

Legacy 

Source Info: 

00008101- 
000130283C84001E_files_full.zip/private/var/mobile/Containers/Shared/AppGroup/D208AE42 
-F10C-49CA-86B0-0B9BEC309007/grdb/signal.sqlite/signal.sqlite.decrypted : Ox29F8D9C6 
(Table: model_TSInteraction, model_OWSUserProfile, Size: 955158528 bytes) 


